poulainv / tottem

Bookmark manager on steroid built with React / NextJs / Apollo Tools / Prisma 2 — styled with TailwindCSS 🌱🎺
https://beta.tottem.app
GNU General Public License v3.0
977 stars 99 forks source link

Bump json5, @svgr/webpack, babel-loader, next and null-loader #176

Open dependabot[bot] opened 1 year ago

dependabot[bot] commented 1 year ago

Bumps json5 to 2.2.3 and updates ancestor dependencies json5, @svgr/webpack, babel-loader, next and null-loader. These dependencies need to be updated together.

Updates json5 from 2.1.1 to 2.2.3

Release notes

Sourced from json5's releases.

v2.2.3

  • Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2

  • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1

  • Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0

  • New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

  • Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2

  • Fix: Bump minimist to v1.2.5. (#222)
Changelog

Sourced from json5's changelog.

v2.2.3 [code, diff]

  • Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

  • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

  • Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0 [code, diff]

  • New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

  • Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2 [code, diff]

  • Fix: Bump minimist to v1.2.5. (#222)
Commits
  • c3a7524 2.2.3
  • 94fd06d docs: update CHANGELOG for v2.2.3
  • 3b8cebf docs(security): use GitHub security advisories
  • f0fd9e1 docs: publish a security policy
  • 6a91a05 docs(template): bug -> bug report
  • 14f8cb1 2.2.2
  • 10cc7ca docs: update CHANGELOG for v2.2.2
  • 7774c10 fix: add proto to objects and arrays
  • edde30a Readme: slight tweak to intro
  • 97286f8 Improve example in readme
  • Additional commits viewable in compare view


Updates @svgr/webpack from 5.1.0 to 5.5.0

Release notes

Sourced from @​svgr/webpack's releases.

v5.5.0

Bug Fixes

Features

Performance Improvements

v5.4.0

Bug Fixes

Features

  • add ForeignObject support for react native (#430) (1b56b85)
  • cli: make all CLI options available in config (a23a186), closes #431 #437

v5.3.1

Bug Fixes

v5.3.0

Bug Fixes

  • cli: remove confusion between {keep,ignore}-existing (#413) (c5430f9), closes #390
  • parcel-plugin: support "parcel" and "parcel-bundler" (853db4e), closes #410

... (truncated)

Changelog

Sourced from @​svgr/webpack's changelog.

5.5.0 (2020-11-15)

Bug Fixes

Features

Performance Improvements

5.4.0 (2020-04-27)

Bug Fixes

Features

  • add ForeignObject support for react native (#430) (1b56b85)
  • cli: make all CLI options available in config (a23a186), closes #431 #437

5.3.1 (2020-04-05)

Bug Fixes

5.3.0 (2020-03-22)

Bug Fixes

  • cli: remove confusion between {keep,ignore}-existing (#413) (c5430f9), closes #390
  • parcel-plugin: support "parcel" and "parcel-bundler" (853db4e), closes #410
  • svgo: support any SVGO config format (#412) (f2b2367), closes #400

Features

5.2.0 (2020-02-23)

... (truncated)

Commits


Updates babel-loader from 8.0.6 to 8.3.0

Release notes

Sourced from babel-loader's releases.

v8.3.0

New features

Full Changelog: https://github.com/babel/babel-loader/compare/v8.2.5...v8.3.0

v8.2.5

What's Changed

New Contributors

Full Changelog: https://github.com/babel/babel-loader/compare/v8.2.4...v8.2.5

v8.2.4

What's Changed

Thanks @​loveDstyle, @​stianjensen and @​pathmapper for your first PRs!

8.2.3

This release fixes compatibility with Node.js 17

Thanks @​Reptarsrage!

8.2.1

8.2.0

  • Replace mkdirp with make-dir 47958ca3857e489e450b27c6f3266375015cba82 (@​JLHwung)
  • Use async config loading when available d8cff97ff387ded0fc9b5cbc489228c96c5ab14a (@​the-spyke)

8.1.0

Commits
Maintainer changes

This version was pushed to npm by nicolo-ribaudo, a new releaser for babel-loader since your current version.


Updates next from 9.4.0 to 9.5.5

Release notes

Sourced from next's releases.

v12.3.2.-canary.11

Core Changes

  • Fix bundling and module resolution in the server layer: #40818
  • Handle loading returning undefined: #40938
  • Fix SWC loader ignore for the server layer when Babel is used: #40939
  • Code refactoring for webpack-config: #40942
  • Merge e2e test node_modules: #40926
  • Rename 404 -> not-found for new router: #40941
  • remove reducer from server bundle: #40959
  • [edge] serialize custom config to middleware-manifest: #40881
  • Font loader support in app: #40898
  • docs: add inline documentation for Link props: #40855
  • feat(experimental): option to polyfill fetch using undici in Node.js <18: #40318
  • Update return shape of generateStaticParams: #40965
  • remove legacy transform code: #40966
  • Revert "edge-ssr: bundle next/dist as ESM for better tree-shaking (#40251): #40967

Documentation Changes

  • Typo in middleware upgrade guide: #40963
  • Add useState and useEffect import: #40944

Misc Changes

  • Always show node_modules inside test in VS Code: #40956
  • misc: add benchmarking script for edge rendering: #40716
  • Add timeout to playwright setup job: #40960
  • Increase playwright install timeout to 5 min
  • Increase other timeouts

Credits

Huge thanks to @​shuding, @​timneutkens, @​feedthejim, @​ijjk, @​Schniz, @​hanneslund, @​HaNdTriX, @​sedlukha, @​hashlash, and @​Ethan-Arrowood for helping!

Commits


Updates null-loader from 3.0.0 to 4.0.1

Release notes

Sourced from null-loader's releases.

v4.0.1

4.0.1 (2020-10-09)

Chore

  • update schema-utils

v4.0.0

4.0.0 (2020-04-15)

Bug Fixes

  • support webpack@5
Changelog

Sourced from null-loader's changelog.

4.0.1 (2020-10-09)

Chore

  • update schema-utils

4.0.0 (2020-04-15)

Bug Fixes

  • support webpack@5

⚠ BREAKING CHANGES

  • minimum required Nodejs version is 10.13
Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/poulainv/tottem/network/alerts).
vercel[bot] commented 1 year ago

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Updated
tottem ❌ Failed (Inspect) Jan 1, 2023 at 11:09AM (UTC)